CVE-2023-32871

In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/May-2024
https://corp.mediatek.com/product-security-bulletin/May-2024

Configurations

No configuration.

History

17 Mar 2025, 17:15

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.3

21 Nov 2024, 08:04

Type	Values Removed	Values Added
Summary		(es) En DA, existe una posible omisión de permiso debido a una verificación de estado incorrecta. Esto podría conducir a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID de parche: ALPS08355514; ID del problema: ALPS08355514.
References	~~() https://corp.mediatek.com/product-security-bulletin/May-2024 -~~	() https://corp.mediatek.com/product-security-bulletin/May-2024 -

06 May 2024, 03:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-06 03:15

Updated : 2025-03-17 17:15

NVD link : CVE-2023-32871

Mitre link : CVE-2023-32871

CVE.ORG link : CVE-2023-32871

JSON object : View

Products Affected

No product.

CWE

CWE-391

Unchecked Error Condition

{"id": "CVE-2023-32871", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 1.8}]}, "published": "2024-05-06T03:15:09.273", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/May-2024", "source": "security@mediatek.com"}, {"url": "https://corp.mediatek.com/product-security-bulletin/May-2024", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@mediatek.com", "description": [{"lang": "en", "value": "CWE-391"}]}], "descriptions": [{"lang": "en", "value": "In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514."}, {"lang": "es", "value": "En DA, existe una posible omisi\u00f3n de permiso debido a una verificaci\u00f3n de estado incorrecta. Esto podr\u00eda conducir a una escalada local de privilegios sin necesidad de privilegios de ejecuci\u00f3n adicionales. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: ALPS08355514; ID del problema: ALPS08355514."}], "lastModified": "2025-03-17T17:15:19.013", "sourceIdentifier": "security@mediatek.com"}

5.3 /10